Re: Multiple SSL certs and domains on same iSeries

[<matt.haas@xxxxxxxxxxx>]

Yes. You can also use this same technique to have SSL and non-SSL
traffic handled by the same server instance.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of albartell
Sent: Friday, October 05, 2007 4:05 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: Re: [WEB400] Multiple SSL certs and domains on same iSeries

Thanks Matt!

So then the following would work, correct?

<VirtualHost 192.168.0.20:443>
   ServerName  WWW.company1.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex index.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
 
<VirtualHost 192.168.0.21:443>
   ServerName  WWW.company2.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex uindex.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>

Aaron Bartell

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On
Behalf Of matt.haas@xxxxxxxxxxx
Sent: Friday, October 05, 2007 2:36 PM
To: web400@xxxxxxxxxxxx
Subject: Re: [WEB400] Multiple SSL certs and domains on same iSeries

Aaron,

What you have will not work. You can only have one SSL certificate per
IP/port combination. The reason is that the HTTP headers are encrypted
so
you can't determine the server name until after it's been decrypted and
that
can't happen until you know the host name.

Once you have separate IP addresses, you can use IP based virtual
hosting to
run everything in the same HTTP server instance.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx]
On Behalf Of albartell
Sent: Friday, October 05, 2007 3:03 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: [WEB400] Multiple SSL certs and domains on same iSeries

Hi all,
 
Working with a client that has need to run two SSL web sites (separate
domains) on the same iSeries.  I have done two SSL domains before, but
seem
to remember it requiring separate ports for each SSL cert.  Is there a
way
to use virtual hosts so requests coming in on https://www.company1.com
and
https://www.company2.com can both use port 443?
 
I would rather not switch the DNS over to the backup iSeries to test
this,
so that is why I am asking you guys :-)   Would the below work with both
virtual hosts listening on port 443?
 
<VirtualHost *:443>
   ServerName  <http://www.company1.COM> WWW.company1.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex index.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP1
</VirtualHost>
 
<VirtualHost *:443>
   ServerName  <http://www.company2.COM> WWW.company2.COM
   DocumentRoot /www/company1/v1.0
   DirectoryIndex uindex.html
   SSLEngine On
   SSLAppName QIBM_HTTP_SERVER_MYAPP2
</VirtualHost>
 
TIA,
Aaron Bartell
http://mowyourlawn.com
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list To
post a
message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change
list
options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.